aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

converted to working wireguard module

Browse source
This commit is contained in:
Anish L 2022-06-14 17:29:17 +10:00
parent c1650e57c8
commit 04490dceb8
4 changed files with 31 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
flake.nix
View file

@ -122,10 +122,10 @@
};
suites = with profiles; rec {
base = [ core users.root users.anish ];
sealight = [ base server ]; # matrix rsshub backup wireguard
mossnet = [ base server taskd wireguard-box shaarli wallabag dns backup monitoring nfs rss-bridge gonic headphones radicale ]; # hpi syncthing
sealight = [ base server ]; # matrix rsshub backup wireguard-server
mossnet = [ base server taskd wireguard-box shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale ]; # hpi syncthing
cube = [ base site server ]; # backup
graphical = [ base bluetooth music sync wireguard wifi desktop ];
graphical = [ base bluetooth music sync wifi desktop ];
curve = [ graphical secrets ]; # backup?
work = [ base ];
};

8
hosts/box/default.nix
View file

@ -32,4 +32,12 @@
# seafile?
# syncthing
};
#age.secrets.box-wg.file = "${self}/secrets/curve-wg.age";
#age.secrets.box-wg.owner = "anish";
#mossnet.wg = {
# enable = true;
# ips = [ "10.0.69.4/24" ];
# privateKeyFile = "/run/agenix/box-wg";
#};
}

8
hosts/curve/default.nix
View file

@ -28,6 +28,14 @@
boot.supportedFilesystems = [ "ntfs" ];
age.secrets.curve-wg.file = "${self}/secrets/curve-wg.age";
age.secrets.curve-wg.owner = "anish";
mossnet.wg = {
enable = true;
ips = [ "10.0.69.2/24" ];
privateKeyFile = "/run/agenix/curve-wg";
};
age.secrets.borg-password.file = "${self}/secrets/borg-password.age";
mossnet.backup = {
enable = true;

4
modules/wireguard.nix
View file

@ -6,7 +6,7 @@ in
{
options = {
mossnet.wg = {
enable = mkEnableOption "Gain access to all mossnet systems through wireguard, but only if it's already included in the server config";
enable = mkEnableOption "Gain access to all mossnet systems through wireguard";
ips = lib.mkOption {
type = with types; listOf str;
default = { };
@ -16,6 +16,7 @@ in
description = ''
The IP this machine is allowed to connect to
'';
};
privateKeyFile = lib.mkOption {
type = types.path;
default = { };
@ -29,7 +30,6 @@ in
};
};
};
};
config = mkIf cfg.enable {
networking.firewall.allowedUDPPorts = [ 60990 ];
networking.wireguard.interfaces = {